TL;DR
Dodo Pizza says hackers attacked its IT systems on September 27–28 and may have accessed some customers’ personal information and order details. The company says payment data is not stored in its systems, has notified Russia’s data protection regulator and is reviewing the incident; a separate report of 68 million affected customers has not been confirmed by the company.
Dodo Pizza said hackers attacked its IT systems on September 27–28 and may have accessed some customers’ personal information and order details, prompting an internal review and notification to Russia’s data protection regulator. The company said it does not store payment data, which it described as safe.
The company said the potentially exposed information could include customers’ names, addresses, phone numbers, email addresses and dates of birth, as well as order details. Dodo Pizza has not confirmed how many people may be affected or whether the data was taken from its systems.
Dodo Pizza said it had blocked the hackers’ access to its data and notified Roskomnadzor, Russia’s federal agency responsible for communications and personal data oversight. It said an internal review is underway. The company did not provide details in the source report about how the attackers entered the systems or when the review might be completed.
The Telegram channel Baza reported that hackers obtained information on 68 million customers across several countries, including order histories covering the past 15 years. That figure and the reported length of the records were not confirmed by Dodo Pizza in its statement, and the company’s description of the possible exposure was limited to some customers’ data.
Customer Data Across Many Markets
The incident could affect customers in multiple countries because Dodo Pizza operates a large international network. The chain had more than 1,527 pizzerias in Russia and 27 other countries as of fall 2026, according to the source report. If personal details and order records were accessed, customers could face privacy risks, including unwanted contact or attempts to misuse information.
The known categories of potentially affected data do not include payment details, and the company says it does not store those details. That assurance narrows the scope of the company’s stated concern, but it does not establish whether customer information was copied or how many accounts may be involved. The scale reported by Baza remains unverified in the available company statement.
What Dodo Pizza Has Disclosed
Dodo Pizza’s public account, as reported by Meduza on September 29, 2026, describes an attack over two days, September 27 and 28. The company said some customer data may have been accessed, but its wording left open whether hackers successfully took information and how extensive any exposure was.
The company’s response so far includes blocking the access it attributed to the hackers, notifying Roskomnadzor and starting an internal review. The source report does not include findings from that review. It also does not specify whether the company has contacted potentially affected customers or whether authorities have announced a separate inquiry.
Baza’s reported total of 68 million records is a separate claim. The source material does not provide supporting documentation or a response from Dodo Pizza confirming that count. The company’s statement, rather, refers to possible access to data belonging to some customers.
““We don’t store payment data — it’s safe,””
— Dodo Pizza
Scale of Exposure Still Unknown
Dodo Pizza has not disclosed how many customers may be affected, whether attackers copied any information, or which systems and records were involved. The list of potentially exposed data describes what hackers may have accessed, not a confirmed inventory of stolen records.
Baza’s claim that data on 68 million customers and 15 years of order histories were obtained has not been corroborated by the company in the source report. It is also unclear whether the figure refers to unique customers, records, or another measure. The company has not said whether its review has found evidence that payment data was exposed; its statement is that payment data is not stored.
Internal Review and Regulator
Dodo Pizza says it is conducting an internal review after blocking the hackers’ access and notifying Roskomnadzor. The review may clarify whether information was accessed or copied, the number of affected customers and the systems involved. No completion date or further public update schedule was given in the source report.
Customers and regulators will need further information from the company to assess the scope of the incident. Until Dodo Pizza publishes findings or other evidence emerges, the reported 68 million figure remains an unconfirmed claim, while the company’s confirmed disclosure is that an attack occurred and some customer data may have been accessed.
Key Questions
When did the attack happen?
Dodo Pizza said its IT systems were attacked on September 27–28, 2026.
What customer information may have been accessed?
The company said the information may include names, addresses, phone numbers, email addresses, dates of birth and order details. It has not confirmed which records, if any, were taken.
Were 68 million customers affected?
Baza reported that hackers obtained data on 68 million customers across several countries. Dodo Pizza has not confirmed that number in the report, and the scale of any exposure remains unclear.
Does the incident involve payment information?
Dodo Pizza said it does not store payment data and said that information is safe. The source report does not provide independent findings about the incident’s scope.
What is Dodo Pizza doing now?
The company said it blocked the hackers’ access, notified Roskomnadzor and began an internal review. It has not announced when the review will conclude.
Source: rss
